All authors
Claude Skills by bitbytelabio
github.com/bitbytelabio1,113 skills0 installs0 views
- Webapp Implementing Api Abuse Detection With Rate LimitingImplements API abuse detection using token bucket, sliding window, and fixed window rate-limiting algorithms backed by Redis, including adaptive limits that tighten during detected attacks and relax during normal traffic.Votes: 0GitHub stars: 2
- Webapp Implementing Api Gateway Security ControlsConfigures API gateways such as Kong, AWS API Gateway, Azure APIM, or Apigee as a centralized security enforcement point, covering authentication enforcement, rate limiting and throttling, request validation, IP allowlisting, TLS termination, and threat protection.Votes: 0GitHub stars: 2
- Webapp Implementing Api Key Security ControlsImplements secure API key generation with sufficient entropy, server-side hashing (SHA-256/bcrypt) instead of plaintext storage, per-key scoping to endpoints/IPs/rate limits, zero-downtime rotation, and automated leak monitoring across GitHub repos, logs, and client-side code.Votes: 0GitHub stars: 2
- Webapp Implementing Api Rate Limiting And ThrottlingImplements API rate limiting and throttling with token bucket, sliding window, and fixed window algorithms, configuring per-user, per-IP, and per-endpoint limits via Redis-backed counters, API gateway plugins, or middleware, and returning proper HTTP 429 responses with Retry-After headers.Votes: 0GitHub stars: 2
- Webapp Implementing Api Security Posture ManagementImplements API Security Posture Management (API-SPM) to continuously discover, classify, and risk-score APIs -- including internal, external, partner, and shadow endpoints -- while aggregating findings from DAST, SAST, SCA, and runtime monitoring into a unified risk view.Votes: 0GitHub stars: 2
- Webapp Implementing Api Security Testing With 42crunchImplements API security testing on the 42Crunch platform, combining API Audit for static analysis of OpenAPI definitions, API Conformance Scan for dynamic vulnerability testing, and API Protect for runtime threat prevention, integrated into CI/CD pipelines and IDEs.Votes: 0GitHub stars: 2
- Webapp Implementing Api Threat Protection With ApigeeImplements API threat protection using Google Apigee reverse-proxy policies, including JSON/XML threat protection, OAuth 2.0 enforcement, SpikeArrest rate limiting, regex-based threat detection, and Advanced API Security for detecting malicious clients.Votes: 0GitHub stars: 2
- Webapp Implementing Application Whitelisting With ApplockerImplements application whitelisting using Windows AppLocker to restrict unauthorized software execution on endpoints, reducing attack surface from malware, unauthorized tools, and shadow IT.Votes: 0GitHub stars: 2
- Webapp Implementing Aqua Security For Container ScanningDeploy Aqua Security's Trivy scanner to detect vulnerabilities, misconfigurations, secrets, and license issues in container images across CI/CD pipelines and registries.Votes: 0GitHub stars: 2
- Webapp Implementing Aws Config Rules For ComplianceImplementing AWS Config rules for continuous compliance monitoring of AWS resources, deploying managed and custom rules aligned to CIS and PCI DSS frameworks, configuring automatic remediation with SSM Automation, and aggregating compliance data across accounts.Votes: 0GitHub stars: 2
- Webapp Implementing Aws Macie For Data ClassificationImplement Amazon Macie to automatically discover, classify, and protect sensitive data in S3 buckets using machine learning and pattern matching for PII, financial data, and credentials detection.Votes: 0GitHub stars: 2
- Webapp Implementing Aws Nitro Enclave SecurityImplements AWS Nitro Enclave-based confidential computing environments with cryptographic attestation, KMS policy integration using PCR-based condition keys, and secure vsock communication channels.Votes: 0GitHub stars: 2
- Webapp Implementing Aws Security Hub ComplianceImplementing AWS Security Hub to aggregate security findings across AWS accounts, enable compliance standards like CIS AWS Foundations and PCI DSS, configure automated remediation with EventBridge and Lambda, and create custom security insights for organizational risk management.Votes: 0GitHub stars: 2
- Webapp Implementing Azure Defender For CloudImplementing Microsoft Defender for Cloud to enable cloud security posture management, workload protection across VMs, containers, databases, and storage, configure security recommendations, and set up adaptive security controls with automated remediation.Votes: 0GitHub stars: 2
- Webapp Implementing Beyondcorp Zero Trust Access ModelImplementing Google's BeyondCorp zero trust access model to eliminate implicit trust from the network perimeter, enforce identity-aware access controls using IAP, Access Context Manager, and Chrome Enterprise Premium for VPN-less secure application access.Votes: 0GitHub stars: 2
- Webapp Implementing Canary Tokens For Network IntrusionDeploys DNS, HTTP, and AWS API key canary tokens across network infrastructure to detect unauthorized access and lateral movement. Integrates with webhook alerting (Slack, Teams, email, generic HTTP) for real-time intrusion notifications.Votes: 0GitHub stars: 2
- Webapp Implementing Cisa Zero Trust Maturity ModelImplement the CISA Zero Trust Maturity Model v2.0 across the five pillars of identity, devices, networks, applications, and data to achieve progressive organizational zero trust maturity.Votes: 0GitHub stars: 2
- Webapp Implementing Cloud Dlp For Data ProtectionImplementing Cloud Data Loss Prevention (DLP) using Amazon Macie, Azure Information Protection, and Google Cloud DLP API to discover, classify, and protect sensitive data across cloud storage, databases, and data pipelines.Votes: 0GitHub stars: 2
- Webapp Implementing Cloud Security Posture ManagementImplementing Cloud Security Posture Management (CSPM) to continuously monitor multi-cloud environments for misconfigurations, compliance violations, and security risks using Prowler, ScoutSuite, AWS Security Hub, Azure Defender, and GCP Security Command Center.Votes: 0GitHub stars: 2
- Webapp Implementing Cloud Trail Log AnalysisImplementing AWS CloudTrail log analysis for security monitoring, threat detection, and forensic investigation using Athena, CloudWatch Logs Insights, and SIEM integration to identify unauthorized access, privilege escalation, and suspicious API activity.Votes: 0GitHub stars: 2
- Webapp Implementing Cloud Vulnerability Posture ManagementImplement Cloud Security Posture Management using AWS Security Hub, Azure Defender for Cloud, and open-source tools like Prowler and ScoutSuite for multi-cloud vulnerability detection.Votes: 0GitHub stars: 2
- Webapp Implementing Cloud Waf RulesThis skill covers deploying and tuning Web Application Firewall rules on AWS WAF, Azure WAF, and Cloudflare to protect cloud-hosted applications against OWASP Top 10 attacks.Votes: 0GitHub stars: 2
- Webapp Implementing Cloud Workload ProtectionImplements cloud workload protection using boto3 and google-cloud APIs for runtime security monitoring, process anomaly detection, and file integrity checking on EC2/GCE instances. Scans for cryptomining, reverse shells, and unauthorized binaries.Votes: 0GitHub stars: 2
- Webapp Implementing Code Signing For ArtifactsThis skill covers implementing code signing for build artifacts to ensure integrity and authenticity throughout the software supply chain.Votes: 0GitHub stars: 2
- Webapp Implementing Conduit Security For Ot Remote AccessImplement secure conduit architecture for OT remote access following IEC 62443 zones and conduits model, deploying jump servers, MFA-enabled gateways, session recording, and approval-based workflows to control vendor and engineer access to industrial control systems without exposing OT networks…Votes: 0GitHub stars: 2
- Webapp Implementing Container Image Minimal Base With DistrolessReduce container attack surface by building application images on Google distroless base images that contain only the application runtime with no shell, package manager, or unnecessary OS utilities.Votes: 0GitHub stars: 2
- Webapp Implementing Container Network Policies With CalicoEnforce Kubernetes network segmentation using Calico CNI network policies and global network policies to control pod-to-pod traffic, restrict egress, and implement zero-trust microsegmentation.Votes: 0GitHub stars: 2
- Webapp Implementing Data Loss Prevention With Microsoft PurviewImplements data loss prevention policies using Microsoft Purview to protect sensitive information across Exchange Online, SharePoint, OneDrive, Teams, endpoint devices, and Power BI.Votes: 0GitHub stars: 2
- Webapp Implementing Deception Based Detection With CanarytokenDeploy and monitor Canary Tokens via the Thinkst Canary API for deception-based breach detection using web bug tokens, DNS tokens, document tokens, and AWS key tokens.Votes: 0GitHub stars: 2
- Webapp Implementing Device Posture Assessment In Zero TrustImplementing device posture assessment as a zero trust access control by integrating endpoint health signals from CrowdStrike ZTA, Microsoft Intune, and Jamf into conditional access policies that enforce compliance before granting resource access.Votes: 0GitHub stars: 2
- Webapp Implementing Devsecops Security ScanningIntegrates Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA) into CI/CD pipelines using open-source tools.Votes: 0GitHub stars: 2
- Webapp Implementing Diamond Model AnalysisThe Diamond Model of Intrusion Analysis provides a structured framework for analyzing cyber intrusions by examining four core features - Adversary, Capability, Infrastructure, and Victim.Votes: 0GitHub stars: 2
- Webapp Implementing Disk Encryption With BitlockerImplements full disk encryption using Microsoft BitLocker on Windows endpoints to protect data at rest from unauthorized access in case of device loss or theft.Votes: 0GitHub stars: 2
- Webapp Implementing Dmarc Dkim Spf Email SecuritySPF, DKIM, and DMARC form the three pillars of email authentication. Together they prevent domain spoofing, validate message integrity, and define policies for handling unauthenticated mail.Votes: 0GitHub stars: 2
- Webapp Implementing Dragos Platform For Ot MonitoringDeploy and configure the Dragos Platform for OT network monitoring, leveraging its 600+ industrial protocol parsers, intelligence-driven threat detection analytics, and asset visibility capabilities to protect ICS environments against threat groups like VOLTZITE, GRAPHITE, and BAUXITE.Votes: 0GitHub stars: 2
- Webapp Implementing Ebpf Security MonitoringImplements eBPF-based security monitoring using Cilium Tetragon for real-time process execution tracking, network connection observability, file access auditing, and runtime enforcement.Votes: 0GitHub stars: 2
- Webapp Implementing Email Sandboxing With ProofpointEmail sandboxing detonates suspicious attachments and URLs in isolated environments to detect zero-day malware and evasive phishing payloads.Votes: 0GitHub stars: 2
- Webapp Implementing Endpoint Detection With WazuhDeploy and configure Wazuh SIEM/XDR for endpoint detection including agent management, custom decoder and rule XML creation, alert querying via the Wazuh REST API, and automated response actions.Votes: 0GitHub stars: 2
- Webapp Implementing Endpoint Dlp ControlsImplements endpoint Data Loss Prevention (DLP) controls to detect and prevent sensitive data exfiltration through email, USB, cloud storage, and printing. Use when deploying DLP agents, creating content inspection policies, or preventing unauthorized data movement from endpoints.Votes: 0GitHub stars: 2
- Webapp Implementing Epss Score For Vulnerability PrioritizationIntegrate FIRST's Exploit Prediction Scoring System (EPSS) API to prioritize vulnerability remediation based on real-world exploitation probability within 30 days.Votes: 0GitHub stars: 2
- Webapp Implementing File Integrity Monitoring With AideConfigure AIDE (Advanced Intrusion Detection Environment) for file integrity monitoring including baseline creation, scheduled integrity checks, change detection, and…Votes: 0GitHub stars: 2
- Webapp Implementing Fuzz Testing In Cicd With AflplusplusIntegrate AFL++ coverage-guided fuzz testing into CI/CD pipelines to discover memory corruption, input handling, and logic vulnerabilities in C/C++ and compiled applications.Votes: 0GitHub stars: 2
- Webapp Implementing Gcp Organization Policy ConstraintsImplement GCP Organization Policy constraints to enforce security guardrails across the entire resource hierarchy, restricting risky configurations and ensuring compliance at organization, folder, and project levels.Votes: 0GitHub stars: 2
- Webapp Implementing Gdpr Data Protection ControlsThe General Data Protection Regulation (EU) 2016/679 (GDPR) is the EU's comprehensive data protection law governing the collection, processing, storage, and transfer of personal data.Votes: 0GitHub stars: 2
- Webapp Implementing Gdpr Data Subject Access RequestAutomates GDPR Data Subject Access Request (DSAR) workflows including identity verification, PII discovery across databases and files using regex and NER, data mapping, response templating per Article 15 requirements, deadline tracking, and audit logging.Votes: 0GitHub stars: 2
- Webapp Implementing Github Advanced Security For Code ScanningConfigure GitHub Advanced Security with CodeQL to perform automated static analysis and vulnerability detection across repositories at enterprise scale.Votes: 0GitHub stars: 2
- Webapp Implementing Honeypot For Ransomware DetectionDeploys canary files, honeypot shares, and decoy systems to detect ransomware activity at the earliest possible stage.Votes: 0GitHub stars: 2
- Webapp Implementing Honeytokens For Breach DetectionDeploys canary tokens and honeytokens (fake AWS credentials, DNS canaries, document beacons, database records) that trigger alerts when accessed by attackers. Uses the Canarytokens API and custom webhook integrations for breach detection.Votes: 0GitHub stars: 2
- Webapp Implementing Ics Firewall With TofinoDeploy and configure Tofino industrial firewalls from Belden/Hirschmann to protect SCADA systems and PLCs using deep packet inspection for OT protocols including Modbus, EtherNet/IP, OPC, and S7comm, enforcing granular access control between ICS security zones.Votes: 0GitHub stars: 2
- Webapp Implementing Identity Verification For Zero TrustImplement continuous identity verification for zero trust using phishing-resistant MFA (FIDO2/WebAuthn), risk-based conditional access, and identity governance aligned with the CISA Zero Trust Maturity Model.Votes: 0GitHub stars: 2